Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
File: 503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json)
Hash identifier: IMhTGjfno6tGtJtIKJdrqrWHuNGgiPAT1Yka1/fsuIU=
Subject key identifier: 5B:79:AC:44:00:FC:F2:0B:F4:DD:0D:2E:5D:8A:CB:2F:FF:75:5D:79
Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial: 010D0C9F4328584863CB05705D041FD16A867600
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 30242
IP address blocks: 2620:84:c000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:05:70:5d:04:1f:d1:6a:86:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=da131b2a-a5a4-454b-8c35-7f0a8dfd0b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:40:8b:d0:85:1d:26:9c:2c:31:25:ae:65:
e7:98:f3:99:6d:d2:1b:b6:66:67:55:0f:ef:dd:f7:
0f:8d:b2:d8:52:3b:04:bc:5c:8e:53:53:97:32:7f:
13:0a:b1:a9:17:9b:71:e9:c0:da:be:0e:8f:02:5f:
87:8d:07:37:31:a4:43:d9:c7:3c:3c:23:6a:d1:88:
68:0f:98:c4:3d:83:76:52:9f:60:5f:86:58:af:3e:
02:50:93:d5:a0:23:17:31:87:b9:94:9d:1b:5c:9c:
30:84:d0:0f:5a:16:d8:d6:bc:c8:b3:85:6c:e0:20:
d2:3d:3b:54:b4:4d:d8:34:9c:53:6c:bc:ae:e6:36:
00:05:14:e9:79:a7:e9:53:a8:cd:44:bd:c2:4c:24:
7d:aa:55:6c:79:93:32:6d:63:8e:38:19:b4:03:cc:
8d:42:dc:a5:04:95:0b:54:6d:69:34:6b:02:64:45:
4a:bd:de:0b:7b:fa:81:1a:13:f4:20:af:2c:6d:58:
3e:b8:4a:9a:0a:dd:24:84:84:f0:61:e7:2c:58:77:
a6:2b:7f:61:32:34:06:c5:f3:09:45:5b:4a:96:92:
a9:68:7b:69:05:4f:3f:7d:b2:55:ff:1e:d7:e8:f9:
8e:55:c1:b2:1f:dd:2f:aa:f5:75:fc:4f:4c:18:b4:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:79:AC:44:00:FC:F2:0B:F4:DD:0D:2E:5D:8A:CB:2F:FF:75:5D:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
X509v3 Authority Key Identifier:
keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:84:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:c1:2a:31:71:ad:8f:59:18:c3:6c:19:91:7b:37:15:98:b4:
98:38:45:ba:fb:e2:1c:47:30:c8:03:69:85:fb:3d:71:67:19:
73:28:68:af:14:e2:f9:95:8b:fa:72:d1:c1:af:85:77:49:a8:
6e:dc:a9:83:6b:2f:3d:7b:af:c6:34:be:06:32:dc:04:3d:54:
53:48:0c:29:56:8e:cc:0e:1e:94:50:ef:76:c9:7a:36:14:e1:
94:5f:ca:43:11:66:4b:9c:d4:52:ab:b3:da:f2:2b:bd:3c:2b:
78:13:fc:d0:0f:30:7f:ee:ac:12:9c:60:fa:ef:d6:3d:48:f0:
07:c9:88:74:28:e4:66:25:6f:41:a0:e7:9b:c9:70:2b:0b:26:
6f:e1:df:48:61:e2:6b:99:d0:7a:97:1c:5c:f6:4a:0f:73:5a:
76:ff:ca:dc:7c:6b:69:3a:73:5d:5c:53:f6:a2:fc:4a:3c:e1:
c0:71:46:02:80:93:40:97:72:12:9c:08:86:54:1e:f9:09:3a:
73:d7:8a:a6:c5:32:8d:b9:fe:0f:8c:f2:9b:7c:c6:00:ab:b2:
15:53:af:73:76:5d:cc:36:d2:e7:34:29:3a:6e:6d:1a:12:c5:
61:c5:33:c2:b4:5f:12:d3:b6:0c:bc:f7:e4:83:62:be:f7:e0:
22:97:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:00:44 2025 by rpki-client